OTOH what about audit trail? Are there any standard solutions for saving commands input at servers without giving person inputting those commands access to the logs?
Also, silly idea for a DOS attack vector: script-spam enough commands to have the audit history consume all available space on server.
